As with NIS2 and other cyber regulations, one expects companies to take notice of cyber when regulators, insurers and courts take notice of